Trend Micro TippingPoint Security Management System H3 - Security appliance - 1GbE - 1U - rack-mountable

Trend Micro TippingPoint Security Management System H3 - Security appliance - 1GbE - 1U - rack-mountable

• Global security device configuration and monitoring
• Flexible network security policy management shared across NextGeneration IPS and TPS devices
• Simplify and automate advanced and external actions with Active Responder
• Security feed management including Digital Vaccine and Threat Digital Vaccine (ThreatDV)
• Enterprise Vulnerability Remediation (eVR) maps vulnerabilities to Digital Vaccine threat intelligence and remediates the discovered vulnerabilities with a virtual patch
• Detect and block network traffic based on geographic region or country
• Central certificate repository for use by the SMS and its managed TippingPoint devices with on-box SSL inspection enabled
• Active Directory (AD) integration provides network user context and reporting
• Visualization of all network traffic when combined with latest generation TippingPoint IPS solutions
• Advanced reporting and trend analysis of security events and network usage
• Integrate with SIEM, breach detection, and other security solutions

Trend Micro TippingPoint Security Management System (SMS) enables "big picture" analysis with trending reports, correlation and real-time graphs on traffic statistics, filtered attacks, network hosts and services, and TippingPoint Next-Generation Intrusion Prevention System (IPS) and Threat Protection System (TPS) inventory and health. The TippingPoint SMS provides a scalable, policy-based operational model, and enables straightforward management of large-scale IPS and TPS deployments.
A very effective component of TippingPoint SMS is the dashboard. It provides at-a-glance monitoring and launch capabilities into targeted management applications, and an overview of current performance for all TippingPoint systems in the network, including notifications of updates and potential issues that may need attention. Customers are also able to customize the SMS dashboard to their specific needs using a dashboard palette of drag-and-drop configurable gadgets that are categorized by health and status, task status, inspection event, event rate, security, reputation, application, and user.

• Advanced policy definition
  Policies can be defined based on physical segments, virtual local area network (VLAN), IP range, and direction. Security policies can be easily changed to fit the rhythm of business operations and be adjusted automatically as threats arise.
• Digital vaccine and ThreatDV distribution
  TippingPoint's Threat Management Center (TMC) distributes filter updates through weekly Digital Vaccine (DV) packages to protect systems against known and zero-day threats. The SMS can be configured to automatically check for, download, and distribute filter updates to the TippingPoint systems.
• Automated event actions
  Included with the TippingPoint SMS is an automated response system called Active Responder that allows users to specify an action in response to a security event. This can range from directing a user to a self-remediation site, generating a trouble ticket, or if the event is severe enough, moving them to a secure VLAN or removal from the network.
• Enterprise Vunerability Remediation (eVR)
  With Enterprise Vulnerability Remediation (eVR), customers can import vulnerability data from VA/VM vendors including Qualys, Rapid7 and Tenable, map CVEs to Digital Vaccine filters and take immediate action based on the enhanced threat intelligence to increase their security coverage.
• Geo/location filtering
  TippingPoint SMS can be configured to detect and block network traffic based on a computer's IP address and host name within a geographic region or country. Customers can establish an action set associated with geographic filters to minimize or eliminate communications with potentially risky systems.
• Central certificate management
  For TippingPoint TPS, with on-box Secure Sockets Layer (SSL) inspection enabled, the TippingPoint SMS provides a central certificate repository for use by the SMS and its managed devices. The SMS also manages the Certification Revocation Lists (CRLs) for each of the Certificate Authorities (CA). It creates and manages certificate signing requests, and performs certificate path validation for every certificate.
• Active directory integration
  TippingPoint SMS can provide visibility, enhanced context, and reporting on the traffic of a particular user through Active Directory (AD) integration. The user name, domain, machine, and user group are all tracked and available for forensics, reporting, and filtering results (E.g., see all attacks targeted to Machine X, or from User Y). Administrators can also see the IP history of a particular AD user or the user history for a particular IP.
• Comprehensive network traffic visualization
  TippingPoint NX Next-Generation IPS solutions can support the export of network flow data statistics for visualization and analysis. With TippingPoint SMS, statistics and flow data summaries can be viewed and analyzed to optimize performance and help identify compromised hosts and other suspicious and malicious network traffic.
• Device configuration and monitoring
  SMS management can scale up to hundreds of devices or drill down deep into the internal workings of the IPS or TPS systems themselves. In addition, a single client can operate across multiple SMSs for even greater scalability. Network parameters as well as TippingPoint system and filter behaviors can be viewed, assessed, and tuned from one interface.
• Advanced forensic analysis
  The global vision of the SMS allows for the continuous analysis of system logs and network management information for immediate cyberattack containment, perpetrator location and identification, and damage mitigation.
• Bandwidth management
  In addition to protecting networks from cyberattacks, TippingPoint also ensures network availability for mission-critical applications. Rogue applications, such as instant messaging and peer-to-peer file sharing, can consume all available network bandwidth and interfere with mission-critical applications. The TippingPoint SMS can easily track traffic associated with rogue applications and block or rate-limit the malicious traffic, ensuring that mission-critical applications have adequate bandwidth.
• Automatic reporting
  When TippingPoint detects and manages malicious attacks and network usage, event data automatically logs to system files in the SMS. Several reporting options are available regarding the compiled and stored log information.
• Third-party integration
  TippingPoint SMS integrates with several third-party security solutions using APIs to enhance a "defense in depth" approach to security. Customers can gain visibility into their network to make informed decisions and take immediate action on any potential threats to infrastructure or data. The SMS can integrate with leading SIEM, VA/VM, breach detection, and other complementary solutions.